https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T19:16:17.983889+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-176747 EUVD-2026-176747 2026-10-22T19:16:17.987097+00:00 EUVD-2026-176747 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000669 fkie_cve-2018-1000669 2026-10-22T19:16:17.987141+00:00

KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments as paid for certain users on behalf of Administrators. This attack appear to be exploitable via The victim must be socially engineered into clicking a link, usually via email. This vulnerability appears to have been fixed in 17.11.

 https://cve.radiocsirt.org/vuln/ghsa-p8cm-wxwr-mp27 GHSA-p8cm-wxwr-mp27 2026-10-22T19:16:17.987187+00:00

KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments as paid for certain users on behalf of Administrators. This attack appear to be exploitable via The victim must be socially engineered into clicking a link, usually via email. This vulnerability appears to have been fixed in 17.11.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000669 gsd-2018-1000669 2026-10-22T19:16:17.987214+00:00 gsd-2018-1000669